Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[gateway] self account management : manage webauthn credentials #6834

Open
13 tasks
tcompiegne opened this issue Jan 2, 2022 · 1 comment · May be fixed by gravitee-io/cloud-app#44 or gravitee-io/gravitee-access-management#1638

Comments

@tcompiegne
Copy link
Member

🌈 Feature

As a 'end user'

I want to 'to register my webauthn (passwordless) devices'

So that 'I can sign-in to my account without my password'

🌄 Additional information

🔗 Dependencies

#6247

📚 Documentation required

Provide link to the issue for documentation update

🦸 Acceptance criteria

  • Given 'an end user'
  • When 'an application calls POST/PUT/DELETE GATEWAY/{domain}/account/api/webauthn/credentails/** endpoints'
  • Then 'webauthn credentials will be automatically registered/updated/deleted'

⚠️ Potential impacts

What are the impacted versions?

3.16

✔️ Definition of Done

For each User Story everything on the list must be considered, select only what was required

  • Acceptance criteria met and tested
  • Sonar Cloud quality gate passes
  • CircleCi checks pass
  • Cypress or Postman API check passes
  • Test containers passed if modifications on the repository modules
  • Translation for portal UI checked
  • Developer created draft documentation PR
  • New migration scripts checked
    Can be run multiple times but only makes changes the first time
    Display to user what script has done
  • Validated on appropriate environment
  • Existing test cases refactored

🚀

@tcompiegne
Copy link
Member Author

I've got some security concerns about this one :

  • Not sure if we have to rely on the existing session to do the process
  • What about open redirection issue ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment